CVE-2022-34379

Dell EMC CloudLink 7.1.2 and all prior versions contain an Authentication Bypass Vulnerability. A remote attacker, with the knowledge of the active directory usernames, could potentially exploit this vulnerability to gain unauthorized access to the system...

Vulnerabilities fixed in Samba

The developers of Samba have fixed several vulnerabilities in Samba. A malicious party could potentially exploit them to reset passwords outside of established processes, access system data or possibly execute commands within the scope of the Samba server. To be abused, the malicious party must...

Samba security vulnerabilities

Samba is the standard Windows interoperability program suite for Linux and Unix. A security vulnerability exists in Samba versions prior to 4.16.4, 4.15.9, and 4.14.14, which stems from a Samba AD user who can cause the server to access uninitialized data via an LDAP add or modify request,...

UBUNTU-CVE-2022-32746

A flaw was found in the Samba AD LDAP server. The AD DC database audit logging module can access LDAP message values freed by a preceding database module, resulting in a use-after-free issue. This issue is only possible when modifying certain privileged attributes, such as userAccountControl...

UBUNTU-CVE-2022-32745

A flaw was found in Samba. Samba AD users can cause the server to access uninitialized data with an LDAP add or modify the request, usually resulting in a segmentation fault...

Active Directory Federation Services Privilege Bypass

The vulnerability of the Active Directory Federation Services AD FS for Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass system security restrictions and enhance their privileges...

How one Microsoft product manager acts as champion for identity security

A technology career embodies the ancient Roman saying that “luck happens when preparation meets opportunity.” Few industries are as dynamic, fast-paced, or intense as technology. With so many challenges to solve, opportunities are everywhere, but as I’ve learned myself through the years, the best...

How one Microsoft product manager acts as champion for identity security

A technology career embodies the ancient Roman saying that “luck happens when preparation meets opportunity.” Few industries are as dynamic, fast-paced, or intense as technology. With so many challenges to solve, opportunities are everywhere, but as I’ve learned myself through the years, the best...

Deploying a SOAR Tool Doesn’t Have to Be Hard: I’ve Done It Twice

As the senior information security engineer at Brooks, an international running shoe and apparel company, I can appreciate the challenge of launching a security orchestration, automation, and response SOAR tool for the first time. I’ve done it at two different companies, so I’ll share some lesson...

SAMR Computer Management

Add, lookup and delete computer / machine accounts via MS-SAMR. By default standard active directory users can add up to 10 new computers to the domain. Administrative privileges however are required to delete the created accounts. Module Options msf use auxiliary/admin/dcerpc/samrcomputer msf...

New Netwrix Auditor Bug Could Let Attackers Compromise Active Directory Domain

Researchers have disclosed details about a security vulnerability in the Netwrix Auditor application that, if successfully exploited, could lead to arbitrary code execution on affected devices. "Since this service is typically executed with extensive privileges in an Active Directory environment,...

org.jvnet.hudson.main:hudson-test-harness (1.274), org.jvnet.hudson.main:hudson-war (1.274) +8 more potentially affected by CVE-2015-8031 via org.jvnet.hudson.main:hudson-core (1.274)

org.jvnet.hudson.main:hudson-core MAVEN version 1.274 is affected by a known vulnerability. The following packages have a transitive dependency on org.jvnet.hudson.main:hudson-core and may be impacted: - org.jvnet.hudson.main:hudson-test-harness 1.274 - org.jvnet.hudson.main:hudson-war 1.274 -...

org.jvnet.hudson.main:hudson-war (1.222), org.jvnet.hudson.plugins:active-directory (1.3) +3 more potentially affected by CVE-2015-8031 via org.jvnet.hudson.main:hudson-core (1.222)

org.jvnet.hudson.main:hudson-core MAVEN version 1.222 is affected by a known vulnerability. The following packages have a transitive dependency on org.jvnet.hudson.main:hudson-core and may be impacted: - org.jvnet.hudson.main:hudson-war 1.222 - org.jvnet.hudson.plugins:active-directory 1.3 -...

org.jvnet.hudson.main:hudson-war (1.229), org.jvnet.hudson.plugins:active-directory (1.5) +6 more potentially affected by CVE-2015-8031 via org.jvnet.hudson.main:hudson-core (1.229)

org.jvnet.hudson.main:hudson-core MAVEN version 1.229 is affected by a known vulnerability. The following packages have a transitive dependency on org.jvnet.hudson.main:hudson-core and may be impacted: - org.jvnet.hudson.main:hudson-war 1.229 - org.jvnet.hudson.plugins:active-directory 1.5 -...

org.jvnet.hudson.main:hudson-test-harness (1.275), org.jvnet.hudson.main:hudson-war (1.275) +3 more potentially affected by CVE-2015-8031 via org.jvnet.hudson.main:hudson-core (1.275)

org.jvnet.hudson.main:hudson-core MAVEN version 1.275 is affected by a known vulnerability. The following packages have a transitive dependency on org.jvnet.hudson.main:hudson-core and may be impacted: - org.jvnet.hudson.main:hudson-test-harness 1.275 - org.jvnet.hudson.main:hudson-war 1.275 -...

hudson.plugins.sctmexecutor:sctmexecutor (1.0), org.jvnet.hudson.main:hudson-test-harness (1.283) +6 more potentially affected by CVE-2015-8031 via org.jvnet.hudson.main:hudson-core (1.283)

org.jvnet.hudson.main:hudson-core MAVEN version 1.283 is affected by a known vulnerability. The following packages have a transitive dependency on org.jvnet.hudson.main:hudson-core and may be impacted: - hudson.plugins.sctmexecutor:sctmexecutor 1.0 - org.jvnet.hudson.main:hudson-test-harness 1.28...

org.jvnet.hudson.main:hudson-test-harness (1.292), org.jvnet.hudson.main:hudson-war (1.292) +11 more potentially affected by CVE-2015-8031 via org.jvnet.hudson.main:hudson-core (1.292)

org.jvnet.hudson.main:hudson-core MAVEN version 1.292 is affected by a known vulnerability. The following packages have a transitive dependency on org.jvnet.hudson.main:hudson-core and may be impacted: - org.jvnet.hudson.main:hudson-test-harness 1.292 - org.jvnet.hudson.main:hudson-war 1.292 -...

org.jvnet.hudson.main:hudson-war (1.167), org.jvnet.hudson.plugins:active-directory (1.0) +1 more potentially affected by CVE-2015-8031 via org.jvnet.hudson.main:hudson-core (1.167)

org.jvnet.hudson.main:hudson-core MAVEN version 1.167 is affected by a known vulnerability. The following packages have a transitive dependency on org.jvnet.hudson.main:hudson-core and may be impacted: - org.jvnet.hudson.main:hudson-war 1.167 - org.jvnet.hudson.plugins:active-directory 1.0 -...

org.jvnet.hudson.main:hudson-war (1.175), org.jvnet.hudson.plugins:active-directory (1.1) +2 more potentially affected by CVE-2015-8031 via org.jvnet.hudson.main:hudson-core (1.175)

org.jvnet.hudson.main:hudson-core MAVEN version 1.175 is affected by a known vulnerability. The following packages have a transitive dependency on org.jvnet.hudson.main:hudson-core and may be impacted: - org.jvnet.hudson.main:hudson-war 1.175 - org.jvnet.hudson.plugins:active-directory 1.1 -...

org.jvnet.hudson.main:hudson-war (1.223), org.jvnet.hudson.plugins:active-directory (1.4) +3 more potentially affected by CVE-2015-8031 via org.jvnet.hudson.main:hudson-core (1.223)

org.jvnet.hudson.main:hudson-core MAVEN version 1.223 is affected by a known vulnerability. The following packages have a transitive dependency on org.jvnet.hudson.main:hudson-core and may be impacted: - org.jvnet.hudson.main:hudson-war 1.223 - org.jvnet.hudson.plugins:active-directory 1.4 -...